Information Disclosure in IBM PureApplication System
CVE-2019-4225

4.4MEDIUM

Key Information:

Vendor
IBM
Status
Pureapplication System
Vendor
CVE Published:
26 June 2019

Summary

The IBM PureApplication System allows local users to access log files that may contain sensitive information from versions 2.2.3.0 to 2.2.5.3. This exposure could lead to unintended data disclosure, posing a security risk for organizations using this product.

Affected Version(s)

PureApplication System 2.2.3.0

PureApplication System 2.2.3.1

PureApplication System 2.2.3.2

References

https://www-01.ibm.com/support/docview.wss?uid=ibm10885602
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/159242
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.